DV SSL/TLS Certificate for treespot.pl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the treespot.pl DV SSL/TLS Certificate

This certificate with serial number 05:33:85:2f:e1:3a:54:8b:24:44:13:96:fe:08:37:46:21:8b for treespot.pl was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for treespot.pl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:33:85:2f:e1:3a:54:8b:24:44:13:96:fe:08:37:46:21:8b
Serial Number (int): 453092866301324399017974429726977447829899
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: bf:d0:ab:11:9c:a0:3e:9e:0c:d9:75:8f:c1:36:8b:ad:06:18:ca:40
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e4:08:d9:96:fb:cf:f6:e9:2f:db:b7:fb:65:ff:28:b4:b8:08:48:60
Fingerprint (SHA-256): 1e:3b:bb:c6:78:0f:70:ae:73:b9:bf:fb:14:64:03:b0:8a:52:bd:1f:14:e4:88:47:a3:8e:81:6e:41:93:86:a0

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/12.crl

Check the revocation status for certificate treespot.pl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for treespot.pl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for treespot.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7STOitbK/m/zNaLdoer
mcuNBhwklt+ueACS4MMEmDy5+rw8IQE3z/odtDH0fbeki57wsTFmTc5wjeZUMWZe
XFs1OwQX9U410V8C1BfW9JY6fbunXfEKdGuhWTqLOT8NDV2p/C9EWifvKEeKwpZb
4YfXFj06pHTy9Yp0u7RnBHaulhBkLlckNRR43OlJaHqlZMnnbyxroamvoWZSZ1LX
tIyhTM0+cj9qcLKVNOBrnhPaMxY4dkbKvorS8QoMvGcPmck6mesKsSLKKz89BdzS
wrWbygocXYfyj6EffySnVMAH2stt7XP7+vJTiLulQEg2s8UAg+4KDGfoz2wiOLzo
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 453092866301324399017974429726977447829899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-18 00:14:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-16 00:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'treespot.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26220374031661367024744546733707169628895390456822316669510880393598102101520402259178070783555833279214954755689135761303936861524965663872143806547780289343524297356572918045985547422900962378862500451806220106388512326935832797884958370413782001402796672942878787078666911452405973649887274487925488017511676600971856108624184217032397056525164647062916327163345544991926101255452688177578221654136772735936028553978993008171975810814468363064961539016933943210118663317052227521195056724497199510686072935701618746853195527140235143020634237061861953387797862503168646935055828147385745888082803707072206631397531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfd0ab119ca03e9e0cd9758fc1368bad0618ca40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treespot.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treespot.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/12.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001978098d8db0000040300463044022015de3ab7ce921218a4fa1148d77983f38440df55325d3f11f3e14fe7797023ad022063b95877c26e9cdae97ec82ec89db660d9fee20268ae3938358beedbcbb7cee000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001978098d8d00000040300463044022008e7526b14adf07f960fc8109779fd015a83953a6dd4543c076cac663a4f3eed0220111fc8e87af44c40672774836740f5c569a234a5fea788fb37a6cf4bb53506b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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